Oklahoma State Election Board 



ROOMB-6 • BOX 53156 • STATE CAPITOL • OKLAHOMA CITY, OKLAHOMA 73152 • (405)521-2391 


July 16, 2018 


Brian Newby, Executive Director 
US Election Assistance Commission 
1335 E West Highway, Suite 4300 
Silver Spring, MD 20910-3225 

Dear Director Newby, 

As Secretary of the State Election Board, I am the chief election official for the State of Oklahoma and as 
such I am charged with the administration of elections in Oklahoma and have general supervisory 
authority over our seventy-seven County Election Boards. I will be responsible for directing how the 
federal monies are expended as well as monitoring and reporting all expenditures. Any questions 
regarding the information contained in this letter or our plan for expending the funds should be 
addressed to me or to the Assistant Secretary, Pam Slater. 

This letter will serve as a narrative of the Secretary of the Oklahoma State Election Board's plan to 
expend the 2018 Help America Vote Act Election Security Grant award funds. The Notice of Grant 
Award from U.S. Election Assistance Commission is dated April 17, 2018, and the funding information is 
as follows: Federal Share - $5,196,017 and State Match Share (5%) - $259,801, totaling $5,455,818. The 
State Election Board Secretary has already designated $259,801 in a state revolving fund account for a 
State Match Share and can begin expending the match funds immediately. 

The State Election Board does not intend to use any part of the federal grant funds to pay personnel 
expenses. Additionally, while the State Election Board may pay for upgrades to hardware and software 
and for training for County Election Board Secretaries and staff, we do not intend to distribute federal 
grant money directly to County Election Boards. 

At this time, the Oklahoma Statutes do not authorize post-election audits, so no funds are planned to be 
expended for that purpose. If the legislature enacts legislation that authorizes post-election audits, we 
will update our plan at that time. 

Our comprehensive plan for expending the HAVA security funds will include but is not limited to the 
projected expenditures within the following categories: 

Equipment - $2.5 million 

Oklahoma implemented a new statewide election system in January 2012. At the end of the 2018 
election cycle, we believe our system will be at the halfway mark of its lifespan. While we don't 
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anticipate that the system will be replaced during the period the grant money is available, we do 
anticipate that the system may require hardware and/or software updates. We will update the narrative 
to reflect such expenditures, should voting system hardware and/or software upgrades become 
necessary. 

Oklahoma will follow state competitive bid requirements to purchase any equipment with federal funds. 
Following, are some of the equipment purchases that Oklahoma is considering to enhance our statewide 
voting system: 

• Electronic Poll Books can increase efficiency at the polling place by providing the ability to scan 
voters' identifications and list ballot(s) the voter is eligible to receive. Electronic poll books can 
also reduce errors in recording voter credit and can protect our voting system against voter 
fraud. Many electronic poll book systems have built-in integrity checks to detect and flag 
records that have been added via potential intrusions. 

• Document scanners at the local election office level would allow for automated storage and 
automatic transfer of documents that could include backup and encryption. This would reduce 
the need for hard copy document storage as well as protect against theft, accidents and 
disasters. 

Voter Registration Systems - Si.65 million 

• Our current voter registration and election management system - Modern Election Support 
Application (MESA) - is a custom system and is used by the State Election Board and all 77 
County Election Boards in Oklahoma. MESA utilizes an older client/server model with 
distributed, thick clients. The architecture of MESA was designed in 2005 and is a PowerBuilder 
application that may only be installed on Windows PCs. The RDBMS of MESA is Oracle 12c and 
will be retained. However, we intend to replace the PowerBuilder user interface with a web- 
hosted user interface hosted in a secure, redundant data center. Some of the security 
advantages to this approach are: 

o Utilizes the latest secure technologies, such as .NET, SSL, etc. 

o Removes the requirement of a Windows executable file installed on client PCs. Executables 
can be decompiled for information into the structures of the overall system and are a vector 
for malware attacks. 

o Browser-based access would allow the use of more secure operating systems (Mac OS, 

Linux) for clients and isolates MESA-hosted application from potential virus status of local 
machines in most cases. 

o Consolidation of application onto a few web servers restricts the number of potential attack 
vectors and allows for centralized security and control, 
o Provides better options for redundancy of database and application with automated failover 
across multiple regions. 
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o Moving database access from client to web server adds an additional layer of isolation in the 
application architecture between the end user, their machine, and the actual data - thereby 
greatly increasing the security posture. 

• In 2015, the Oklahoma legislature passed Senate Bill 313 which authorized online voter 
registration. The bill requires such a system to link with the Oklahoma Department of Public 
Safety (DPS) driver license database to verify information submitted and retrieve a signature. 
DPS' computer system cannot currently meet the technical requirements in the law. DPS is 
upgrading its computer system and will be able to accommodate online voter registration when 
the new system is in place. The State Election Board is hopeful that full online voter registration 
can be implemented in 2020 and that the additional HAVA funds may be used for some of the 
system implementation. 

Security - $1 million 

• The State Election Board is working closely with our state cybersecurity experts at the Oklahoma 
Office of Management and Enterprise Services (OMES) - Information Services Division and with 
state and federal Department of Homeland Security personnel to ensure that we have a robust 
plan in piace for cybersecurity and physical security. With input from our many partners, we 
have identified some areas we intend to enhance. The enhancements discussed include but are 
not limited to: 

o VPN (upgrades, additional features, expanded use) 

o 2FA - Two Factor Authentication required for Admin access to VPN 
o Checks for antivirus instalied 
o Checks for Windows Updates 
o Reiocation of our servers to OMES secure server bunker 
o AWS upgrades, automated faiiover, additional redundant, replicated DBs 
o Auditing 

o Requiring anti-virus protection managed from SEB Cloud for all MESA workstations 
o Adding check for SEB signature on workstation or anti-virus status on Application launch 
o Adding digital signature to MESA application. 

• The State Eiection Board contracts with OneNet, a division of the Oklahoma State Regents for 
Higher Education. OneNet provides a secure, virtuai private network (VPN) to meet the 
requirements of our statewide voting system. We are exploring the possibility of upgrading this 
system to provide enhanced security and protection of our system. 

Training - $305,818 

We anticipate that the State Eiection Board wili need to deveiop initiai and ongoing training for ali 

County Election Board staff on any new hardware and software or purchases as stated above. 
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The State Election Board also intends to enhance and improve existing security training for our State 
Election Board employees as well as the staff at local County Election Boards. We plan to work with our 
many partners and vendors to develop curriculum and plan to explore and utilize various ways to deliver 
the training such as webinars, video conferences and in-person training. The use of Tabletop Exercises 
(TTX) such as was conducted at the Belfer Center in Cambridge, MA in March 2018, could be modified 
for Oklahoma election officials. 

We appreciate the opportunity to receive the additional HAVA grant funds. We believe the funds will 
help ensure the continued integrity and security of our voter registration and election system in 
Oklahoma. 


Sincerely, 



Oklahoma State Election Board 



2018 HAVA ELECTION SECURITY GRANT 

Budget Information 

CFDA # 90.404 Non-Construction Program 

Name of Organization: 

Budget Period Start: 

Budget Period End: 

Oklahoma State Elec 

3/23/2018 

3/23/2023 

ion Board 

SECTION A- BUDGET SUMN 

FEDERAL & NON- 

(Consolidated Budget for total project term- 
FEDERAL FUNDS (Match) up to 5 years as defined by grantee) 

PROGRAM CATEGORIES 

BUDGET CATEGORIES 

(a) Voting 
Equipment 

(b) Election 
Auditing 

(c ) Voter 
Registration 
Systems 

(d) Cyber Security 

(e) Communications 

(f) Other 

(g) other 

TOTALS 

% Fed Total 

1. PERSONNEL (including fringe) 








$ 

0% 

2. EQUIPMENT 

$ 2,500,000.00 


$ 1,650,000.00 





$ 4,150,000.00 

80% 

3. SUBGRANTS-to local voting jurisdictions 








$ 

0% 

4. TRAINING 



$ 55,818.00 

$ 250,000.00 




$ 305,818.00 

6% 

5. All OTHER COSTS 




$ 740,199.00 




$ 740,199.00 

14% 

6. TOTAL DIRECT COSTS (1-6) 

$ 2,500,000.00 

$ 

S 1,705,818.00 

$ 990,199.00 

$ 

$ 

$ 

$ 5,196,017.00 


7. INDIRECT COSTS (if applied) 








$ 

0% 

8. Total Federal Budget 

$ 2,500,000.00 

$ 

$ 1,705,818.00 

$ 990,199.00 

$ 

$ 

$ 

$ 5,196,017.00 


11. Non-Federal Match 




$ 259,801.00 




$ 259,801.00 


12. Total Program Budget 

$ 2,500,000.00 

$ 

S 1,705,818.00 

S 1,250,000.00 

$ 

$ 

$ 

$ 5,455,818.00 


13. Percentage By Category 

48% 

0% 

33% 

19% 

0% 

0% 

0% 






Proposed State Match 

5.0% 




A. Do you have an Indirect Cost Rate Agreement approved by the Federal government or 
some other non-federal entity? 

If yes, please provide the following information: 

B. Period Covered by the Indirect Cost Rate Agreement (mm/dd/yyyy-mm/dd/yyy): 

No 



C. Approving Federal agency: 

D. If other than Federal agency, please specify: 

E. The Indirect Cost Rate is: 






























































